finished 8 (user and authentication)